From: Julius Härtl <jus@bitgrid.net>
Date: Mon, 22 Jul 2019 15:22:05 +0000 (+0200)
Subject: Add additional check for read permissions
X-Git-Tag: v17.0.0beta1~71^2
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=refs%2Fpull%2F16502%2Fhead;p=nextcloud-server.git

Add additional check for read permissions

Signed-off-by: Julius Härtl <jus@bitgrid.net>
---

diff --git a/lib/private/Files/Node/Folder.php b/lib/private/Files/Node/Folder.php
index 7f908a757a0..19f04048779 100644
--- a/lib/private/Files/Node/Folder.php
+++ b/lib/private/Files/Node/Folder.php
@@ -447,7 +447,8 @@ class Folder extends Node implements \OCP\Files\Folder {
 				return false;
 			}
 			$relative = $this->getRelativePath($node->getPath());
-			return $relative !== null && $relative !== '/';
+			return $relative !== null && $relative !== '/'
+				&& ($cacheEntry->getPermissions() & \OCP\Constants::PERMISSION_READ) === \OCP\Constants::PERMISSION_READ;
 		}));
 	}